[c-nsp] ASA5520/ casas 7.0(4) meaning of MM_WAIT_MSG3 ?!

jcovini at free.fr jcovini at free.fr
Wed Jan 31 11:44:09 EST 2007


What's the meaning of MM_WAIT_MSG3 ?

This tunnel is correctly defined as a l2l,

tunnel-group 1.2.3.4 type ipsec-l2l
tunnel-group 1.2.3.4 ipsec-attributes
 pre-shared-key *

however, there is a strange type in the isakmp sa status, instead of L2L I got
this :

LAN2LAN#sh crypto isakmp sa
6   IKE Peer: 1.2.3.4
    Type    : user            Role    : responder
    Rekey   : no              State   : MM_WAIT_MSG3

Jan 31 2007 14:23:43: %ASA-3-713902: IP = 1.2.3.4, Removing peer from peer table
failed, no match!
Jan 31 2007 14:23:43: %ASA-4-713903: IP = 1.2.3.4, Error: Unable to remove
PeerTblEntry

wtf ?!


More information about the cisco-nsp mailing list